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IN THE CLAIMS: 

1 1 . (Original) In an intermediate node of a data network that comprises one or more vir- 

2 tual local area networks (VLANs), the intermediate node containing a forwarding data- 

3 base comprising one or more forwarding database entries, a method for controlling flood- 

4 ing of packets on a VLAN comprising the steps of: 

s establishing a limit that indicates a number of forwarding database entries that 

6 may be associated with the VLAN; 

7 determining if a number of forwarding database entries associated with the VLAN 

8 matches the limit established for the VLAN; and 

9 if so, performing an action for controlling the flooding of packets on the VLAN. 

1 2. (Previously Presented) In an intermediate node of a data network, the data network 

2 having one or more virtual local area networks (VLANs), the intermediate node contain- 

3 ing a forwarding database having one or more forwarding database entries and a method 

4 for controlling flooding of packets on a VLAN comprising the steps of: 

5 referencing a media access control (MAC) limit database comprising one or more 

6 MAC limit database entries wherein each entry is associated with a VLAN and contains a 

7 MAC limit that indicates a number of forwarding database entries which may be associ- 

8 ated with the VLAN, and a MAC count that indicates a number of forwarding database 

9 entries associated with the VLAN; 
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10 using the MAC limit database to determine if a MAC count associated with the 

1 1 VLAN matches the MAC limit associated with the VLAN; and 

12 if so, perfomiing an action for controlling the flooding of packets on the VLAN. 

13 

1 3. (Previously Presented) The method of claim 2, the step of using the MAC limit data- 

2 base further comprising: 

3 locating a MAC limit database entry associated with the VLAN; and 

4 comparing the MAC count of the MAC hmit database entry with the MAC limit 



5 of the MAC limit database entry to determine if the number of forwarding database en- 

6 tries associated with the VLAN matches the limit established for the VLAN. 



1 4. (Previously Presented) The method of claim 2, the step of using the MAC limit data- 

2 base further comprising: 

3 locating a MAC limit database entry associated with the VLAN; 

4 comparing the MAC count of the MAC limit database entry with the MAC limit 

5 of the MAC limit database entry to determine if the MAC count matches the MAC limit; 

6 and 

7 if not, updating the MAC count. 

1 5. (Previously Presented) The method of claim 1 , further comprising: 

2 logging a message to a log accessible to the intermediate node. 

1 6. (Previously Presented) The method of claim 1, further comprising: 

2 disabling flooding for the VLAN. 

1 7. (Previously Presented) The method as defined in of claim 1, further comprising: 

2 disabling forwarding packets for the VLAN. 
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1 8. (Previously Presented) The method of claim 1, further comprising: 

2 disabling learning for the VLAN. 

1 9. (Previously Presented) In an intermediate node of a data network, the data network 

2 having one or more virtual local area networks (VLANs), the intermediate node contain- 

3 ing a forwarding database having one or more forwarding database entries, a method for 

4 controlling flooding of packets on a VLAN comprising the steps of: 



s establishing a limit that indicates a number of forwarding database entries that 

6 may be associated with the VLAN; 

7 determining if a number of forwarding database entries associated with the VLAN 

8 matches the limit established for the VLAN; 

9 if so, shutting down the VLAN ; 

10 acquiring a packet associated with the VLAN; 

1 1 determining if the VLAN is shut down; and 

12 if so, dropping the packet. 

1 10. (Previously Presented) The method of claim 1 , further comprising: 

2 acquiring a packet wherein the packet is associated with the VLAN; 

3 determining if the forwarding database contains an entry which contains a MAC 

4 address that matches a source address contained in the packet; 

5 if not, determining if learning is disabled for the VLAN; and 

6 if not, generating a forwarding database entry that contains the source address of 

7 the packet. 

1 11. (Previously Presented) The method of claim 1, further comprising: 

4 



PATENTS 
112025-0531 
Seq.#7231 CPOL #268683 



2 acquiring a packet associated with the VLAN; 

3 determining if the forwarding database contains an entry which contains a MAC 

4 address that matches a destination address contained in the packet; 

5 if not, determining if flooding is enabled for the VLAN; and 

6 if so, flooding the packet. 

1 12. (Original) An intermediate node coupled to a data network containing one or more 

2 VLANs, the intermediate node comprising: 

3 a forwarding database containing one or more entries wherein each entry is asso- 

4 ciated with a node accessible to the intermediate node and wherein each entry is associ- 

5 ated with a virtual local area network (VLAN); and 

6 a processor configured to, for each VLAN, (i) establish a limit for the VLAN 



7 wherein the limit indicates a number of forwarding database entries that may be associ- 

8 ated with the VLAN, (ii) determine if a number of entries in the forwarding database as- 

9 sociated with the VLAN matches the limit established for the VLAN, and (iii) if so, per- 

10 form an action for controlling the flooding of packets on the VLAN. 



1 13. (Previously Presented) An intermediate node coupled to a data network containing 

2 one or more VLANs, the intermediate node comprising: 

3 a forwarding database containing one or more entries wherein each entry is asso- 

4 ciated with a node accessible to the intermediate node and wherein each entry is associ- 

5 ated with a virtual local area network (VLAN); 

6 a media access control (MAC) limit database having one or more MAC limit da- 

7 tabase entries wherein each entry is associated with a VLAN and contains a MAC limit 

8 that indicates a number of forwarding database entries which may be associated with the 

9 VLAN and a MAC count that indicates a number of entries in the forwarding database 

10 associated with the VLAN; and 

11 a processor configured to, for each VLAN, (i) read a MAC limit associated with 

12 the VLAN fi:om the MAC limit database, (ii) read a MAC count associated with the 
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13 VLAN from the MAC limit database, (iii) determine if the MAC count associated with 

14 the VLAN matches the MAC limit associated with the VLAN, and (iv) if so, perfomi an 

15 action for controlling the flooding of packets on the VLAN. 

1 14. (Previously Presented) The intermediate node of claim 13 comprising: 

2 the processor further configured to, for each entry in the forwarding database, 

3 compare the MAC count with the MAC limit of the VLAN associated with the forward- 

4 ing database entry to determine if the MAC count matches the MAC limit. 

1 15. (Previously Presented) The intermediate node of claim 13 comprising: 

2 the processor further configured to update the MAC count if the MAC count does 

3 not match the MAC limit. 

1 16. (Previously Presented) The intermediate node of claim 12 further comprising: 

2 the processor configured to log a message to a log accessible to the intermediate 

3 node. 

1 17. (Previously Presented) The intermediate node of claim 12 further comprising: 

2 the processor configured to disable flooding for the VLAN. 

1 18. (Previously Presented) The intermediate node of claim 12 further comprising: 

2 the processor configured to disable forwarding packets for the VLAN. 

1 19. (Previously Presented) The intermediate node of claim 12 further comprising: 

2 the processor configured to disable learning for the VLAN. 

1 20. (Previously Presented) A system comprising: 

2 a forwarding database comprising one or more forwarding database entries asso- 

3 ciated with a VLAN; 
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4 means for establishing a limit wherein the limit indicates a number of entries 

5 which may be contained in the forwarding database associated with the VLAN; 

6 means for determining if a number of entries in the forwarding database associ- 

7 ated with the VLAN matches the limit established for the VLAN; and 

8 means for performing an action for controlling the flooding of packets on the 

9 VLAN, if the number of entries in the forwarding database associated with the VLAN 

10 matches the limit established for the VLAN, 



1 21. (Previously Presented) A system comprising: 

2 means for referencing a media access control (MAC) limit database comprising 

3 one or more MAC limit database entries wherein each entry is associated with a VLAN 

4 and contains a MAC limit that indicates a number of forwarding database entries which 

5 may be associated with the VLAN and a MAC count that indicates a number of entries in 

6 the forwarding database associated with the VLAN; 

7 means for using the MAC limit database to determine if a MAC count associated 

8 with the VLAN matches the MAC limit associated with the VLAN; and 

9 means for performing an action for controlling the flooding of packets on the 

10 VLAN, if the MAC count associated with the VLAN matches the MAC limit associated 

11 with the VLAN. 



1 22. (Previously Presented) A system comprising: 

2 means for establishing a limit wherein the limit indicates a number of entries 

3 which may be contained in the forwarding database associated with the VLAN; 

4 means for determining if a number of entries in the forwarding database associ- 

5 ated with the VLAN matches the limit established for the VLAN; 

6 means for performing an action for controlling the flooding of packets on the 

7 VLAN, if the nximber of entries in the forwarding database associated with the VLAN 

8 matches the limit established for the VLAN; 
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means for accessing an entry in the forwarding database associated with a VLAN; 
means for comparing a MAC count with a MAC limit associated with the VLAN 
to determine if the MAC count matches the MAC limit; and 

means for updating the MAC count, if the MAC count does not match the MAC 

limit. 

23. (Previously Presented) A computer readable medium containing computer executa- 
ble instructions for controlling the flooding of packets on a VLAN, the computer readable 
medium containing computer executable instructions for: 

establishing a limit of a number of forwarding database entries which may be as- 
sociated with the VLAN; 

determining if a number of entries in the forwarding database associated with the 
VLAN matches the limit established for the VLAN; and 

if so, performing an action for controlling the flooding of packets on the VLAN. 

24. (Previously Presented) A method for operating an intermediate network node, com- 
prising: 

receiving a packet having a VLAN tag; 

looking up a MAC destination address of the VLAN packet in a forwarding table; 

looking up, in response to not finding the MAC destination address in the for- 
warding table, a limit of MAC addresses (MAC limit) of the VLAN; and 

performing an action for controlling flooding of packets on the VLAN in response 
to a count of MAC addresses (MAC count) of the VLAN matching the MAC limit for the 
VLAN. 
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1 25. (Previously Presented) The method of claim 24, further comprising: 

2 logging a message, as the action for controlling flooding on the VLAN. 

1 26. (Previously Presented) The method of claim 24, further comprising: 

2 disabling flooding for the VLAN, as the action for controlling flooding on the 

3 VLAN. 

1 27. (New) The method of claim 24, further comprising: 

2 disabling learning for the VLAN, as the action for controlHng flooding on the 

3 VLAN. 

1 28. (Previously Presented) The method of claim 24, further comprising: 

2 shutting down the VLAN, as the action for controlling flooding on the VLAN. 

1 29. (Previously Presented) The method of claim 24, further comprising: 

2 in response to receiving a VLAN packet for a shut down VLAN, dropping the 

3 packet. 

1 30. (Previously Presented) The method of claim 24, further comprising: 

2 in response to receiving a VLAN packet, looking up a MAC source address of the 

3 VLAN packet in the forwarding table; 
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in response to not finding the MAC source address in the forwarding table, deter- 
mining if learning is disabled for the VLAN; and 

if learning is not disabled for the VLAN, generating a forwarding database entry 
for the VLAN. 

3 1 . (Previously Presented) The method of claim 24, further comprising: 

in response to not finding the MAC destination in the forwarding table, determin- 
ing if flooding is disabled; 

if flooding is disabled, dropping the VLAN packet; and 

if flooding is not disabled, floodmg the VLAN packet out all ports except a re- 
ceiving port. 

32. (Previously Presented) The method of claim 24, further comprising: 

looking up the MAC limit for the VLAN in a MAC limit database. 

33. (Previously Presented) The method of claim 24, further comprising: 

looking up the MAC cotmt for the VLAN in a MAC limit database; and 
in response to the MAC count not matching the MAC limit, updating the MAC 
count in the MAC limit database. 

34. (Previously Presented) An intermediate network node coupled to a data network con- 
taining one or more VLANs, the intermediate network node comprising: 
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means for receiving a packet having a VLAN tag; 

means for looking up a MAC destination address of the VLAN packet in a for- 
w^arding table; 

means for looking up, in response to not finding the MAC destination address in 
the forwarding table, a limit of MAC addresses (MAC limit) of the VLAN; and 

means for performing an action for controlling flooding of packets on the VLAN 
in response to a count of MAC addresses (MAC count) of the VLAN matching the MAC 
limit for the VLAN. 

35. (Previously Presented) The intermediate network node of claim 34, further compris- 
ing: 

means for logging a message, as the action for controlling flooding on the VLAN. 

36. (Previously Presented) The intermediate network node of claim 34, further compris- 
ing: 

means for disabling flooding for the VLAN, as the action for controlling flooding 
on the VLAN. 

37. (Previously Presented) The intermediate network node of claim 34, further compris- 
ing: 

means for disabling learning for the VLAN, as the action for controlling flooding 
on the VLAN. 
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38. (Previously Presented) The intermediate network node of claim 34, further compris- 
ing: 

means for shutting down the VLAN, as the action for controlling flooding on the 

VLAN. 

39. (Previously Presented) The intermediate network node of claim 34, further compris- 
ing: 

means for in response to receiving a VLAN packet for a shut down VLAN, drop- 
ping the packet. 

40. (Previously Presented) The intermediate network node of claim 34, further compris- 
ing: 

in response to receiving a VLAN packet, means for looking up a MAC source ad- 
dress of the VLAN packet in the forwarding table; 

in response to not finding the MAC source address in the forwarding table, means 
for determining if learning is disabled for the VLAN; and 

if learning is not disabled for the VLAN, means for generating a forwarding data- 
base entry for the VLAN. 

41. (Previously Presented) The intermediate network node of claim 34, further compris- 
ing: 
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in response to not finding the MAC destination in the forwarding table, means for 
determining if flooding is disabled; 

if flooding is disabled, means for dropping the VLAN packet; and 
if flooding is not disabled, means for flooding the VLAN packet out all ports ex- 
cept a receiving port. 

42. (Previously Presented) The intermediate network node of claim 34, further compris- 
ing: 

looking up the MAC limit for the VLAN in a MAC limit database. 

43. (Previously Presented) The method of claim 34, further comprising: 

means for looking up the MAC count for the VLAN in a MAC limit database; 

and 

in response to the MAC count not matching the MAC limit, means for updating 
the MAC count in the MAC limit database. 

44. (Previously Presented) An intermediate network node coupled to a data network con- 
taining one or more VLANs, the intermediate network node comprising: 

one or more line cards configured to receive VLAN packets; 
a forwarding database configured to store one or more MAC destination address 
associated with one or more VLANs; 
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a media access control (MAC) limit database configured to store one or more 
MAC limit database entries, each MAC limit database entry associated with a VLAN and 
contains a limit of MAC addresses (MAC limit) for the VLAN and a count of MAC ad- 
dresses of the VLAN; and 

a processor configured to perform an action for controlling flooding of packets on 
a VLAN in response to the MAC coimt of the VLAN matching the MAC limit for the 
VLAN. 

45. (Previously Presented) The intermediate network node of claim 44, fiirther compris- 
ing: 

the processor configured to log a message, as the action for controlling flooding 
on the VLAN. 

46. (Previously Presented) The intermediate network node of claim 44, further compris- 
ing: 

the processor configured to disable flooding for the VLAN, as the action for con- 
trolling flooding on the VLAN. 

47. (Previously Presented) The intermediate network node of claim 44, further compris- 
ing: 

the processor configured to disable learning for the VLAN, as the action for con- 
trolling flooding on the VLAN. 
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48. (Previously Presented) The intermediate network node of claim 44, further compris- 
ing: 

the processor configured to shut down the VLAN, as the action for controlUng 
flooding on the VLAN. 

49. (Previously Presented) The intermediate network node of claim 44, further compris- 
ing: 

the processor configured to drop a VLAN packet, in response to receiving the 
VLAN packet for a shutdown VLAN. 

50. (Previously Presented) The intermediate network node of claim 44, further compris- 
ing: 

the processor configured to look up a MAC source address of a VLAN packet in 
the forwarding table; 

the processor configured to determine if learning is disabled for the VLAN, in re- 
sponse to not finding the MAC source address of the VLAN in the forwarding table; and 

the processor configured to generate a forwarding database entry for the VLAN, if 
learning is not disabled for the VLAN. 

51 . (Previously Presented) The intermediate network node of claim 44, further compris- 
ing: 
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the processor configured to determine if flooding is disabled for a VLAN, in re- 
sponse to not finding a MAC destination for a VLAN packet in the forwarding table; 
the processor configured to drop the VLAN packet, if flooding is disabled; and 
the process configured to flood the VLAN packet out all ports except a receiving 
port, if flooding is not disabled. 

52. (Previously Presented) The intermediate network node of claim 44, further compris- 
ing: 

the processor configured to look up a MAC limit for a VLAN in the MAC limit 
database. 

53. (Previously Presented) The method of claim 44, further comprising: 

the processor configured to look up a MAC count for a VLAN in the MAC limit 
database; and 

the processor configured to update the MAC count in the MAC limit database, in 
response to the MAC count not matching the MAC limit. 

54. (Previously Presented) A computer readable media, comprising: 

the computer readable media containing instructions for operating an intermediate 
network node for the practice of the method of, 

receiving a packet having a VLAN tag; 
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looking up a MAC destination address of the VLAN packet in a forwarding table; 

looking up, in response to not finding the MAC destination address in the for- 
warding table, a limit of MAC addresses (MAC limit) of the VLAN; and 

performing an action for controlling flooding of packets on the VLAN in response 
to a count of MAC addresses (MAC count) of the VLAN matching the MAC limit for the 
VLAN. 
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